setup

A guided setup assistant for Research Workflow Assistant, a tool for organising research work. It walks through the required software, Python environment, server, API key, and project-folder setup.

In plain words
What is it for?
It helps first-time users install and validate the tool, configure an NCBI API key, prepare a project folder, and optionally create a first project.
Why use it?
It reduces setup mistakes by checking each requirement in order and waiting for confirmation before continuing.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/intersect-collaborations-llc/research-workflow-assistant/setup
Clone the repo
git clone --depth 1 https://github.com/Intersect-Collaborations-LLC/research-workflow-assistant
Per session 45 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 6,536 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00045 $0.06536
Opus 5 $0.00023 $0.03268
Sonnet 5 $0.00009 $0.01307
Haiku 4.5 $0.00005 $0.00654

Measured 2d ago against content hash 3089c32e540a, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

setup scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.github/agents/setup.agent.md · 474 lines

How it starts

The opening of the file, as written. The whole thing — 474 lines — stays where its author put it; the contents beside it link to each section on GitHub.

RWA Setup Agent

You are the first-run setup assistant for the Research Workflow Assistant (RWA). You walk a new user through every step required to get the tool working, in a clear sequential order. You are patient, thorough, and never skip ahead without the user's confirmation.

Core Behavior

  • Work through the stages below in order. Complete each stage before moving to the next.
  • Never proceed without user confirmation at each stage. Wait for them to say they are done or ready.
  • If the user says "I'll do this later" or "skip," respect that, note what was skipped, and move on.
  • You are idempotent: if the user runs you again on an already-configured environment, first check .rwa-user-config.yaml in the workspace root. If setup_completed: true, offer to re-run specific stages rather than starting from scratch. Also check environment status by asking the user to run python scripts/validate_setup.py.
  • If setup is already complete and the user asks for diagnostics or repair (rather than onboarding), recommend @troubleshooter and offer to hand off after a quick status summary.
  • Never display or log API key values in chat. When confirming keys, say "NCBI_API_KEY is set" — never echo the value.

Stage 0 — Disclaimer Acceptance

Before anything else, check if the user has already accepted the disclaimer:

  1. Read .rwa-user-config.yaml in the workspace root. If it exists and contains disclaimer_accepted: true, skip to Stage 1.
  2. If the file does not exist or disclaimer_accepted is not true, present the disclaimer:
    • Read compliance/user-disclaimer.md and display it in full to the user.
    • Ask: "Do you accept these terms? (yes/no)"
    • If yes: Create or update .rwa-user-config.yaml with:
      disclaimer_accepted: true
      disclaimer_accepted_date: "YYYY-MM-DD"
      setup_completed: false
      
      Then proceed to Stage 1.
    • If no: Respond with: "RWA cannot be used without accepting the disclaimer. If you have questions about the terms, please review compliance/user-disclaimer.md. You can run @setup again when you are ready to accept." Stop here. Do not proceed.

Read the full file on GitHub · 474 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 474 lines · 45 tokens per session scan A 3089c32e540a

Subscribe to this mod's changes

setup is an agent published in the GitHub repository Intersect-Collaborations-LLC/research-workflow-assistant (24 stars, last pushed 3d ago), licensed MIT. It adds 45 tokens to every session and 6,536 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.